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( START ) 



CHOOSE PRIME 
NUMBERS P, Q 



16 



N := P Q 



18 



CHOOSE RANDOM 
NUMBER E < N RELATIVELY 
PRIME TO (P-1) (Q-1) 



20 



22 



24 



PINV := 1/P MOD Q 



D:=1/E MOD (P-1)-(Q-1) 

I 



CHOOSE RANDOM 
NUMBERS SP, SQ 
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28 



DP := (D MOD(P-1)) SP 



DQ := (D MOD (Q-1)) SQ 



( ) 



Fig. 1 
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MODULUS N 



PUBLIC 
EXPONENT E 



12 



FIRST PRIME FACTOR P 



SECOND 
PRIME FACTOR Q 



CRT COEFFICIENT PINV 



FIRST SAFEGUARD 
VALUE SP 



SAFEGUARDED FIRST 
CRT EXPONENT DP 



-.J SECOND SAFEGUARD 
VALUE SQ 



SAFEGUARDED SECOND 
CRT EXPONENT DQ 
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Fig. 2 



( START ) 



( ERROR ) 




( ERROR ) 



Y1 := (X MOD P) A (DP/SP) 



L • 




Y := [ ((Y2 - Y1) • PINV) MOD Q ] • P + Y1 



( END ) 
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( START ) 



46- 



CHOOSE 
RANDOM NUMBER R 



48' 



DIVIDE DP BY RSP 
WITH REMAINDER 
DP1 := L DP / (R-SP) J 
DP2 : = DP MOD (R SP) 



1 



50~ Y11 :=(XMODP) A R 



52- 



Y12:=Y11 A DP1 



56- 




YES 



32' 



- ( ERROR ) 



Y13:= (X MOD P) A (DP2/SP) 



58- 



Y1 :=Y12Y13 



( END ) 



Fig. 3 
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( START ) 
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PINV 




SP 


X 
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DP 






SQ 
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( ERROR ) 




CALCULATE 
Y1 := (X A (DP/SP)) MOD P' 
WITH DIVISIBILITY CHECK 

ZZZZiZZIIZ 

CALCULATE 
Y2 := (X A (DQ/SQ)) MOD Q' 
WITH DIVISIBILITY CHECK 

i 
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Y' := [ ((Y2 - Y1) • PINV) MOD Q' ] • P + Y1 



-74 




Y := Y' MOD N WITH N = P Q |~78 

I 



Fig. 4 



( END ) 



